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1. INTRODUCTION: A WORLD FACING THE CYBERSPACE. 

The term "cyberspace” comes from William Gibson's novel Neuromancer^ . The concept draws a new frontier, a new territory that tries 

to shelter all the Information, Communications and ideas. The events takíng place on the Internet are not happenlng in countries where 
participants or servers are physically, but a place where its true meaning is projected 2 . 


Cyberspace consists of transactions, relationshlps and thought itself, which stretches like a standing wave in the web all our 
Communications. This digital world is both everywhere and nowhere, but not where bodies live. We are facing a new cosmos 3 in which, 
in principie, all may enter without privllege or prejudlce accorded by race, economic power, milltary forcé, or place of birth. a new open 
space where anyone, anywhere may express their beliefs, no matter how singular, without fear of belng coerced Into silence or 
conformity is set. 


However, as holding L essig 4 , Cyberspace is not a place but many places and characteristics of each are not always identical, differing 

from each other in their most fundamental characteristics. 


At first it was understood that cyberspace configured a territory that was essentially free, that ¡t was not capable of belng governed and 

therefore outside all control and resistants against any domineering influence. so J ohnson / P ost 6 They proclaimed that: 


" He has appeared a new electronic means indifferent to the geographicat limits which produces confusión within the law by creating 
entirely new phenomena that need to become subject to dear legal rules but which can not be controlled, in a satisfactory manner, by 
any ofthe forms current sovereignty based on territoriality 


1 Vine. G IBSON, William, Neuromancer (trad. Arconada, José), Planet, Barcelona 1996. Neuromante is the first novel of a composite trilogy also by Zero Count (1986) and 
Mona Lisa Overdrived, (1988). While they are sharing the same universe and some characters have little to do with each other. The title comes from the English word 
"Neuromancer" and arises from the composition of the terms; "Neuro" (mental) and "Mante" (subject or actor of "Manda" which means divination and magic extensión (eg 
Necromancer, quiromante)). Thus we have "Neuromancer" as a direct translation Neuromancer. Gibson's cyberspace is a cyber adventure camp jeans. It is ¡Ilegal hackers 
getting information online on behalf of large corporations and to that end they move to Matrix. 


2 This O RTEGA G iménez States that "the fact that Internet or, ¡f you will, "cyberspace" ignores borders, since all prívate relations with Internet, are transbou ndary, this is 
potentially international; second, InternetHe wants the information it makes available to its users is free; third, Internet despite having become an unprecedented phenomenon, 
we must not forget that, in practice, it is nothing more than a technological environment; and a quarter, Internet, since its inception, it has made a major effort to be resistant 

to the regulation of States. "In" Internet regulation "[O RTEGA G Iménez, Alfonso, Journal of Computer Law AlfaRedi. No. 061, August 2003 
http://www.alfa-redi.org/enlinea.shtml], 

3 The cosmos cyberspace tends to displace it as disinformation Grass says: "Only Science and ignorance are linked in space and time". [Cf.. G RASS, Günther, op. cit, p. 

227], 

4 Vine. L ESSIG, Lawrence, Code and Other Laws of Cyberspace (trad. Alberola, Ernesto), Madrid, 2001, p. 125. 

5 S and T TEINER- HRELKELD expresses "respect the Government ofthe network some things never change. Most notable is its ability to resist the government in any form 
". [S TEINER- T HRELKELD, Tom, [ "Of Governance and technology" Inter @ct¡ve Week online, October 2, 1998]. 

6 Cfr. J ohnson, David R. / P OST, David G., "Law and Borders-The Rise of Law in Cyberspace" StanfordLawReiew, Vol. 48, 

1996, p. 1367. 
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More as points L essig 7 modernly these approaches tend to be reputed mere myths, giving way to a new more complex reality that 
reveal the existence of múltiple architectures within the network to conceal the existence of numerous and diffuse interestss. 


Therefore, cyberspace has its own code or rules of conduct which interact netizens ( net/zens) apparently free but subject to a pre-set 
architecture. That hidden code as preached K atsh 9 It stands as architect of his own environment 10 . 


The ¡nformatlon soclety of the XXI century by great technological dependence of all citizens who are unable characterlzed each day to 
function more autarkic ( Computer dependency). The soul and backbone of this new company is projected internet in cyberspace a 
common space of globalized ¡nformatlon. In fact it has even come to talk about a new evolutionary stage of man as either" homo 
diglta/is"Or as” computerlzed ape 


In cyberspace multitude of Services that transform our customs, benefits are based on strong communication skllls offered by the 

network are implemented. also treats Services like tele-education ( e-learning), electronic commerce ( e-commerce) or electronic 
administration ( e-government), telemedicine ( e-health), Electronic Enterprise Resource Management ( e-management), telematics 
banking ( home-banking) eleven, teleworking ( teie-work), the advertising offer ( cybermarketing) or more directly in the area of managing 

domestic sphere (domotics). 


Such is the herltage field expansión is occurring in cyberspace, we must ask whether e-commerce appears as the manifestation of a New 
Lex Mercatoría Internationale or if, reaching even further, international trade will be fully absorbed by e-commerce. 


But these new features are only isolated manifestations of a larger phenomenon that arises how multi-arm squid everywhere. The 
digitization of the network, the stored post-program monitoring, fiber optic synchronous digital transmission of high-speed, integrated 
management Systems and many other technologies and improvements appear continuous, allow the emergence of new Services that 
are being incorporated gradually market and enable a qualitative leap in Communications. 


Cyberspace is a place where it is, in principie, all feasible communication with everyone, anywhere and with the ability to transport 
bidirectional audio, visual information, text and graphics. The infosphere tends to expand their domains to any public or prívate 
information: pólice, judicial, banking, bureaucratic, commercial, medical, military, financial, tax, registration, etc. 


By sheer inedia all our technical data flows and incessant repetitively over the network, the domain of cyberspace feeds and takes 
shape gradually as omniscient. As the 


7 Vine. L ESSIG, Lawrence, op. cit., p. 67. 

s Taken by reference G arda M exia, Paul, Principies of Internet Law, Tirant lo Blanch, Valencia, 2002, p. 99. In the same vein, John P. Barlow made in 1990 the Declaration 
of Independence of Cyberspace in proclaiming: "In cyberspace we have no elected government, ñor is it likely to have, which is why I address you, Governments 
industrialized world with no more authority than freedom itself speaks. I declare the global social space we are building is by nature independent of the tyrannies you seek to 
impose on us. You have no moral right to rule us ñor do you possess any methods to make us fear your law, we should truly fulfill. You have no moral right to rule us ñor do 
you possess any methods to make us fear your law, we should truly fulfill. Your legal concepts of property, expression, right to identity, freedom of movement and context do 
not apply to us. They are based on matter. Here in cyberspace there is no matter". 


9 Vine. KATSH, Ethan M., Software Worlds and the First Amendment: Virtual Doorkeepers in Cyberspace, Chicago, 1996, pp. 335- 
360. 

to and M itchell He States that, contrary to what is believed, cyberspace is not a chaotic place but as happens in space requires some supports or structures. So the author 
argües: "Architecture, iaws and customs maintain and represent any existing balance in real space. As it buiids and widens scope tends to create and maintain a similar 
balance, aithough these will be embodied in software structures and electronic access Controls rather than architectural type arrangements ". Cfr. M ITCHELL, William J., City 
of bits: Space Place and the infobahn, Cambridge, Massachusetts, 1996, p. 159. 


eleven A new dimensión is the possibility of certain financial institutions to issue electronic money, a possibility that appears regulated by Royal Decree 322/2008 of 29 February 
(BOE no. 54 of 3DE March 2008) on the legal status of entities electronic money. 

12 Thus C ALVO C ARA VACA, Alfonso Luis / C ARRASCOSA G onzalez, Javier, "Internet, B2B international staff and Lex Mercatoria" Journal of European Studies, no. 39, 2005, 
pp. 105-116. 
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information a way to understand the power, cyberspace ¡s placed as a new ¡ncreasingly powerful body that tends to nullify the 
individual. More paradoxically, as noted M oles 13 , It corresponds to justice and the right task to avert the danger by which human beings 
can become defenseless and helpless against the telematic operators and regulators. 


There is a legal right that is legal certainty (art. 9.3 CE) which extrapolates Internet security in cyberspace is as ¡mportant in the face of 
a modern economy already begínníng to emerge "cyber pólice” tralned to handle these complex latitudes. In short, new valúes that 
generate new confllcts but the welght of the network in the world economy it is becoming ¡ncreasingly accused. 


As G says omez M Artin i4, there can be no denying that the cyberworld program is a multifaceted reality with various aspects worthy of 

legal protection. But cyberspace with the possibilities of development and progress that involves humanity can be reputed as a legally 
worthy of greater protection. 


2. phising 


It is known as' phishing' (of English fishing, fishing meen) the phishing (online, but also in other ways) which seeks to appropriate 

confidential data from users, based on them, get heritages undermlne others. The crlme is to obtain Information such as credlt card 
numbers, passwords, account information or other personal information by deception. This type of fraud Is usually conducted through 
emalls or pop-ups. 


The SJPI of Murcia ie defines this practice as a type of crime falls within the scope of the scams that translates into a telematic tactic by 
which the user is taken to a page "web" with appearance that is to your financial institution and is characterized by acquiring 
confidential information fraudulently (as may be a password or detailed information about credit cards or other bank information). The 
scammer, known as phisher is passed by a person or trust company in an apparent official communication electronics, usually an 
email, or any instant messaging system or even using also telephone calis. After obtaining these confidential data, phiser proceeds to 
seize the wealth of others ordering bank transfers. 


The scam in classical Román law was conceptualized as stellionatus crime /zrChameleon crimes) were as varied as the types of modus 
operanditi was hard cataloging difficult, and appeared clearer when described, the easier it evade its consequences by altering some 
of the variables or Ínsitas premises in its definition. It seems an inescapable fact that scientific advances always go ahead of the law. 

This asynchrony between technology and law creates a legal vacuum which must be covered by the system so quickly, suffering 
"horror vacui" is. Given the growing number of reported phishing incidents related to additional methods of protection are required. 
Attempts have been made to laws that punish the practice, campaigns to prevent users and implementing technical measures to 
programs. 


Etymologically, the term phishing comes 19 of the English word "fishing" twenty( fishing) referring to the act of fishing hooks users with 

¡ncreasingly sophisticated, and thus obtain 


13 Vine. M OLES, Ramón J. Law and control of internet, Ist Ed., Ariel, Barcelona, 2004, esp. pp. 17 to 21. 

14 Vine. G Omez M ARTIN, Víctor, "The criminal protection of copyright on software: An example of the patrimonial nature of crimes against intellectual property in the CP 

1995 (1)" Review of the Judiciary. No. 66, 

2nd quarter 2002, p. 145. 

meen The term phishing was adopted by crackers attempting to "fish" accounts anonymous victims; ph is commonly used by hackers to replace f as root ancient form of 

hacking known as "phone phreaking". 

le SJPI Murcia, 69/2007, 30 March (RJ 2008/44072). 

17 Vine. M ENTXAKA E LEXPE, Rosa María, "Stellionatus" Bullettino de/l istituto di Diritto Romano "Vittorio Scialoja, no. 30, 

1988, pp. 277-335. 

is Vine. DER UGGIERO, Roberto, Civilrights institutions, 4th Ed. Italiana (Naples March 1915), (trad. Serrano Suner, José Santa- Cruz), Madrid, 1943, p. 163. 

is The first mention of the term phishing data from January 1996 newsgroup alt.2600 hackers, although the term appeared early in the printed edition of "Newsletter hacker". 

twenty Vine. D REYFUS, Hubert L., About internet (traó. Hormazábal, Cristian P.), EDIUOC, Ist Ed., Barcelona, 2003, pp. 112 etseq. 
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financial information and passwords. Another etymological versión of the term "phishing" is found in the contraction of" password 
harvesting fishing "(Harvest and phishing), although probably only a retroactive acronym. 


Most methods of phishing use some form of technical deception in the design to show a link in an e-mail seems a copy of the 
organization which is passed the impostor. The quality of the hook depends on the quality of phiser in all cases, the entity can measure 
the criminis iter made, as in scams usually always attend some negligence, more or less by the victim, and we must be on the 
subjective circumstances surrounding it. 


In another popular method of phishing, the attacker uses against the victim's bank code or Service which is passed program itself. This 
type of attack is particularly problematic because it directs the user to log on to the bank's own site or Service where the URL and 
security certificates seem corred. In this method of attack (known as Cross Site Scripting) users receive a message saying they have to 
"verify'' their accounts, followed by a link that looks like the real website; Actually, the link is modified to perform this attack, it is also 
very difficult to detect if they do not have the necessary knowledge. 


One of the most importad aspects is money laundering. Currently fictitious companies try to recruit teleworkers through e-mails, chats, 
IRC and other media, offering not just work from home but also other lucrative benefits. Those who accept the offer will automatically 
become victims who commit a serious crime without knowing it: the so-called "money laundering" obtained through fraudulent act of 
phishing twenty-one. 


the so-called spear phishing fliterally spear phishing) is one of the most recent attempts of phishing victims taking customers from 
banks and Online payment Services. Although the example shown in the first image is sent by phishers indiscriminately hoping to find a 
customer of the bank or Service, recent studies show that phishers ¡nitially are able to establish what bank a potential victim relates, 
and thereby send an e-mail, falsified appropriately, the potential victim. 


Another way to make the global phishing is by sending millions of emails under the guise of banks, requesting the keys to the bank 
account or specific attacks. The third step is that the scammers start to withdraw large sums of money, which are transmitted to the 
accounts of intermediarles (muleteers). 


Intermediaries perform the transfer to the accounts of swindlers, taking these amounts of money and those intermediaries -the 
percentage of the commission. 

In the United States, Senator Patrick Leahy introduced the Anti-Phishing Act 2005 on 1 March 2005. This federal law anti-phishing 
stated that those crimináis who create fake web pages or send spam e-mail accounts with intent to defraud users could be fined up to 
$ 250,000 and imprisonment for a term of up to five years. 


3. PHARMING 


Pharming is the exploitation of a vulnerability in the software of the DNS (Domain Ñame System) servers or teams of users, which 
allows an attacker to redirect a domain ñame ( domain ñame) to a different Computer. Thus, a user to enter a 


twenty-one For a person can register with this kind of companies you must fill out a form which will indícate, among other information, your bank account number. This is intended 
to enter the money from bank fraud made by the method of phishing on the account of the worker-victim. Once hired, the victim automatically becomes what is commonly 
known as mulero. With each fraudulent act phishing the victim receives substantial income in your bank account and the company notifies you of the fact. Upon receipt of this 
income, the victim a percentage of total money will stay, may be around 10% and 20% as a working committee and the rest resends through systems send money to 
accounts indicated by the pseudo- company. Given the ignorance of the victim (often motivated by economic necessity) it is involved in an act of important swindle, it may be 
required by justice on a complaint banks. These complaints are usually resolved by imposing return all money stolen from the victim, ignoring the fact that this only received 
a commission. 
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given domain ñame that has been redirected, will enter into your Internet browser to the website that the attacker has specified for that 
domain ñame. 

The word pharming derived from the term "farm" (farm) and is related to the term "phishing", used to ñame the social engineering 
technique 22 that by spoofing emails or web pages, try to obtain confidential user Information, from credit card numbers to passwords. 

The etymology of this word is that once the attacker has galned access to a DNS server and taken control of ¡t, is as possessing a 
"farm" where pleasure can make use of the resources found there. 


Pharming is based on the knowledge that the Internet computers have a unique IP address, conslsting of 4 octets (4 groups of 3 dlgits) 
from 0 to 255 separated by a period (eg 

139.0.0.2). These IP addresses are comparable to postal addresses of the houses, or the number of phones. Because of the difficulty 
would users have to remember these IP addresses, emerged Domain Ñames, which are assoclated with IP addresses in the same 
way that people's ñames are associated wlth their telephone numbers in a phone book. 


Exploits pharming They are often perpétrate in two ways: directly to the DNS servers, so that all users would be affected or attacking 
specific computers by modlfylng the file "hosts” present on any Computer runnlng under Microsoft Windows or Unix Systems . 


Technique pharming It is normally used for phishing attacks, redirecting the domain ñame of a trusted entity to a website, identical in 

appearance, but actually created by the attacker to get the prívate user data, usually bank details. 


4. LEGAL STATUS 

We can distinguish Instruction No. 4/2007 of the Chief Prosecutor of the Supreme Court in Madrid two aspects: 

to) Phiser behavior or Phamer 

As we know, phiser or farmerThe person who goes to a web page (from a bank or an individual) and takes over the keys of access to 

electronic banking transfers nonconsensual making money at the expense of current accounts of victims. 


This failure was evident in the STS of April 19, 1991 2 . 3 , in which the conduct of a bank employee who handled the current accounts of 
several cllents via Computer and more than three mllllon pesetas pocketed scored. The court found that there was no fraud, 
misappropriation but since there was no deception on the victims to take them to cause them the necessary error that induce them to 
make this heritage available for the perpetrator. The solution given by this ruling, considered doctrinally very torced, held in his FJ 2nd: 


" The "induction" an act of disposal ofassets is realizable only against a person and not against a machine, involves a comisiva 
ideológica! dynamics charged substrate. Rightiy it stressed that the machines do not they can be fooied, computers either, so the 
cases in which the damage occurs directiy through the Computer system with which operations transfer of assets perform, no deceitor 
error required for the crime of fraud occurs. Without deception, cardinal element con, not be understood produced this". 


In fact since no actual deception to another certain sector of the doctrine shuns, inappropriate, the use of the term "scam” 24. Therefore, 
one of the main features of Computer scam is that structurally is not required deception, because as argued STS 20 


22 If we look ¡n a dictionary of English the term pharming, we will find it defined as " production ofdrugs from plants and animáis genetically altered At a conference organized 
by the Anti-Phishing Working Group, Phillip HallamBaker defined this term as "a marketing neologism designed to convince bankers and businessmen to buy new equipment 
or safety accessories." 

2.3 STS 191 April 1991 (Soto Nieto) [RJ 1991/2813]. 

24 And M unoz C ONDE, Francisco, Crimina!!aw. specialparí, 15th Ed, Tirant lo Blanch, Valencia, 2004, p. 426. 
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November 2001 25, Since we are in a committed fraud through a transfer without consent by the victim through Computer manipulation, it 
is not necessary the concurrence of any deception by the scammer. This is so because the ambuscade to foreign assets through 
Computer manipulations performed acts with automatic detriment of third, precisely because there is a Computer manipulation and 
deception so the staff is not required. 


After the reform of LO 15/2003 a third section for, advancing the barrier punitive, punishing the manufacture, introduction, possession 
or facilitation of Computer programs specifically aimed at the commission of common scams or Computer is introduced. As well holds M unoz 
C onde 26, such conduct would not pass from being mere unpunished preparatory acts and the guardrail in response to the important role 
of information technology in modern traffic comes forward though, seems a bit much his punishment with the same penalty as a crime 
abstract. 


Instruction No. 4/2007 of the Chief Prosecutor of Madrid distinguishes the following assumptions: 

1 ) Misrepresentation of the website to obtain access codes and passwords and use of the so obtained to take money from current 
accounts by bank transfer. Chief Prosecutor Madrid (Manuel Moix) urges prosecutors to pursue this type of behavior as a crime of 
Computer fraud Art. 248. 2 CP and a crime against privacy of art. 197.2 of the Penal Code. However because what happens alleged 
contest rules (art. 8.1 of the CP) are encouraged to qualify exclusively as a Computer fraud (Art. 248.2 CP). 


As noted by the aforementioned STS of 20 November 2001 argües the need for a special type for this swindle: 


" The Criminal Code of 1995 introduced paragraph 2 of art. 248 Criminal Code a specific type of fraud to estabtish acts acechanza to 
assets outside made by performing manipulations and devices that do not address other, but machines whereby it, as a resuit of 
devious behavior, acts in automatism detriment of third parties. These assumptions do notfitin the previous understanding ofthe 
scam because the author did not fooi another but a machine, in the triai course, the use of a credit card pretending to be the owner 
couid not be integrated into the classic concept ofthe scam as the "deception" was made to the machine automatically it effected the 
financia! arrangement .". 


2) Misrepresentation of the website to obtain key page and access passwords without, transfers, then the sale or transfer of these keys 
and passwords is done. In this case the prosecutor Madrid understands that we have a crime of divulging secrets of art. 197. 2 and 3 
of CP. 


3) Misrepresentation of a website to obtain keys and passwords for access and use only part of the thus obtained to draw down money 
from current accounts by bank transfer, preserving the rest or transmitting them to a third party: it will qualify as a crime art Computer 
fraud. 248.2 CP and other revealing secrets of art. 197.2 and 3 ofthe CP in real competition. 


b) Conduct "mulero" 

As for the conduct of "mulero" (person who opens or "lend" its current account for the phiser make money income of the victims, 
usually by a división of the spoils, either a lump sum or through a fee or percentage. it is not unpunished and qualify, depending on the 
case, or as a crime of Computer fraud Art. 248.2 CP (STS 533/2007 27, 12 June) or as an offense of money laundering Art. CP 301, 
considering the circumstances, singularly the origin ofthe money. 


5. ELEMENTS OF ciberestafa 


26 STS 2175/2001 (2nd), 20 November (Martínez Arrieta) [RJ 2002/805], 

26 Vine. M unoz C ONDE, Francisco, op. cit., p. 426. 

27 STS 533/2007 (2nd, Sec. Ist), 12 June (Giménez García) [RJ 2007/3537], 
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The ma¡n constituent elements are: 


- The Profit: refers to the subject act with desire or ¡ntention to enrich themselves, to increase their assets, if any, to circumvent a debt. 


- The typical action is to rely on a Computer or similar device. After the reform of LO 15/2003, of 25 November, the concepts of "deceit 
and error rather” being replaced by "tamper" dlsappears. It corresponds to the behavior to alter, modify or hide Computer data so that 
operatlons ¡ncorrectly made or not carried out, and also with behavior change program instructions in order to alter the outcome that 
expected. Thus a subject can enter ¡ncorrect instructions in an accounting program so that no record charges to your checklng account 
for example, or to move to your bank account all income made a certain day to accounts whose numbers end in particular. 


The reference to "any Computer or similar device" seems able to accommodate all possible cases through an unauthorized transfer of 
property assets to the detriment of a third party ¡s made, either ¡n making program modificatlons or alterations in Processing, and In 
manlpulatlons ¡nput, output or data transmission. As noted, the legal formula is very wide, although perhaps Inevitable ¡n this field, in 
which technological development is ongoing, with the danger that a stricter prose leave soon obsolete provisión 28 . The reference to 
"similar device” might suggest that other non-computer nature maneuvers are also included. However, the meaning of paragraph 
obliges hlm understand that everythlng ¡s based on these assumptions, so the legal mention must also be ¡nterpreted from that 
perspectlve. 


- Involuntary transfer of the assets of another person wlthout using violence. What is usually translated into a shift of money from the 
vlctlm's bank account to the account of the offender. 


- Subject to third, since it ¡s not the vlctlm who performs economic transfer, but is the author of the crlme which takes place. 


Regarding the subjective element of the unjust, this crime does not fit the culpable commisslon, the perpetrator acts willfully, that is, 
knowing and wanting to perform acts of criminal action. The concept of "Computer manipulation" itself implies intentionality of the active 
subject; is difficult for anyone to carry out acts of alteration, modification of data or software error and also will report an economic 
benefit, because these actions require knowledge of the data or correct instructions and replace them with others, the subject knows 
that his performance It constitutes an action contrary to law and still is carried out. 


6. HACKING 


He hackingor Computer intrusión, consisting unauthorized access 29 , usually violating security mechanisms where they exist, files and 

databases contained in the foreign Computer systems, typically large companies or institutions. 


He hacker It appears in certain environments amateur surfers, with some fictional aura, tinged with some consideration and respect, 
given its expertise to skip the barriers or safety devices frequently greatly entangled with which Computer systems are shielded and 
bases information banks, State military institutions or large companies and multinationals, sometimes even Computer. Rush hackerJhey 
are retraced as a kind of modern Computer versión of the myth of Robin Hood 30 < or David 


28 Vine. Q UINTERO O LIVARES, Comments to the special criminal law, Aranzadi, Pamplona, 1996, p. 491. 

29 You can give access to passwords by "bugs" or through Trojans or programs that help decipher the word or password when dialing. Examples of programs commonly used 
for such actions are Subseven or Netbus, which are small applications configured by the programmer or commonly used and cracked by hackers. 

3 0 This syndrome of "Robin Hood", involves a "parallel moral" that is said to be immoral damage done to specific individuáis, but not caused to organizations or companies 
(Vid. S ARZANA, Carlos, "criminalitá and technology: II caso dei computer-crimes" 

Rassegna Prison and Criminológica!, nos. 1-2, Year 1. Rome, 1979, p. 74). Very often the means used are not considered ¡Ilegal in the computing environment (¡Ilegal 
copies of programs, unauthorized exchanges of programs, 
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vs. Goliath), but the truth is that behaviors hacking, although in itself need not be harmful, because once circumvented the protective 
barriere computing the hacker usually leave the system without ulterior motives, it remains true that, on many occasions, are the 
prelude to serious violatíons of privacy, the rights of intellectual property or against company secrets. 


Criminal offense, where the hacker\s limited, without more, to meddle is very confusing, because if the behavior continúes in the strict 
field of Computer intrusión, must be considerad from the point of view of criminal relevance, such as ¡mpunity or atypical. Moreover, 
even reaches the consideration of an attempt or a preparatory measure (where this was punishable) because the subjective element is 
not fulfilled, since the purpose of hacker not infringe privacy or intellectual property against ñor is damage Systems or software in which 
it intrudes. 


In this sense, pronounced the Order of 29 January 2002 the Court of Instruction No. 2 of Lorca 31 

destipifica behaviors that considering that not fulfilled the subjective element of the unjust and declaring in his FJ 2nd: 


"Hacking behaviors mere access to Computer Systems perpetrated with the solé purpose of accessing the password or NAND iogic 
gate They are currently constitute a crime because they lack the subjective element of the unjust." 


From the point of view of criminal policy, this absence of criminal relevance is severely criticized by some sectors who do not hesitate 
to consider the hacking You should have a specific offense. 


The most common manipulations are typícally produced by the introduction of false data, alteration of the programs or the use of Iogic 
bombs, Trojan horses, and analyzed, or techniques such as salami 32, causing the automatic execution of bank transiere, income or 
credit recognition in favor of the person making the alteration 33. The average employee and 


introduced into Computer systems for fun, use the system for their own purposes, etc.), whereas at most such behaviors may be "irregular", perhaps a simple "game" or 
"hobby" but in any case ¡Ilegal (vid . G US onzalez R, Juan José, "Approaching the criminal treatment of ¡Ilegal property with Computer means or procedures" Journalofthe 
Faculty of Law at the Complutense University, Num. 12 1986 pp. 110-111; C L OSA Camacho, C Camacho L OSA, Luis, Cybercrime, Madrid, Charts Condor, 1987, pp. 74 ff 
G UTIÉRREZ F Ranees, María Luz, Computer fraudand fraud, Publications Center Ministry of Justice, Madrid, 1991, pp. 74 et seq.). Contrary to popular belief, it is accurate 
or superior intelligence in the author ñor high technical knowledge is required, but is capable of being developed behavior by any minimally introduced in the management of 
information technology. Known cases of young people who, almost like a game, are introduced into sophisticated Computer systems is more than significant proof of this. 
According to studies carried out in relation to the known cases in the United States and West Germany, the authors are usually young people (between 24 and 35 years), 
educated, mostly male, with no criminal record, awake, very active, eager and highly motivated, They are acting for various reasons (revenge, profit, Carlos, op. cit., pp. 
76-77). 


31 Alcázar Ponente Fajardo. 

32 This ñame to input instructions to transfer own accounts resulting accumulation of cents that are ignored when operating with current account, interest calculation, amounts, 
financial transactions, etc., and reaching significant amounts (vid., C Camacho L OSA, Luis, op. cit. „ pp. 41-42 and S Neyers, Alfredo, Fraud and other cyber crimes, 

Management and Production Technologies, SA, Madrid, 1990, p. 112). 

33 Manipulations may occur at any time of the processing of data or system operation. In the input phase data, for example, by introducing false data (providers or fictitious 
shareholders, false bilis lacking employees, erroneous wages, etc.) so that the Computer automatically without manipulation in the program, performs fraudulent operation 
(dividend payment, bank transfers, payroll calculation, etc.). Manipulations in the program require alteration of statements and instructions of it to carry out operations other 
than originally intended (sentences that add cents to the price of producís and transferred to own accounts, instructions for modifying inventory and subtract Ítems stores, 
forwarding to own accounts ofthe remains in the calculation of interest, etc.). They are often accompanied by changes in the output data, so changes are not reflected in the 
lists or accounting (assigning them to false starts, omitting operations, etc.), making it difficult, so the discovery of the fact. In connection with data transmission networks or 
running in short interfering transmissions, illegitimately accessing the system to discover confidential information, modify files, perform fraud, etc. Sample input manipulations 
in the case of those who work in the Department of Family Allowances Working in an office and over nine months to transfer commands fictitious family allowances for 
children to various bank accounts, being discovered by chance. Modification example in the case of programs who enter the program data introduces several fictitious payroll 
employees whose salaries were to be paid to own accounts. It also modifies the program that generates the lists of salaries, accounting reports and balance sheets for those 
employees ñor the amounts allegedly paid to them, it follows, that is not reflected in accounting, account tax not appear detracted to rent 
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acting with and on machines and not on people, along with the fact that the use and affects behavior in incorporeal elements are the 
defining characteristics of these assumptions and that give them identity from the criminal point of view. 


However, concern about its development explains why it has been expressly typing in some jurisdictions 3 .4. Not so in the Spanish penal 
code, which contains no provisión generically punish unauthorized access to Computer Systems of others. As a result, the punishment 
of these behaviors will only be possible to the extent that they will refer to data that are subject to special protection or involve 
behaviors that are indudable in criminal generic types. 


Quite the contrary consider that there is insufficient regulation administrative regulations to deal with such situations and responsibility 
servers not take appropriate technical measures to restrict such abuse. 


The most serious problem is the incardinación most hacking behavior in the repressive criminal law. 


If the purpose is to discover the intimacies of a particular concrete it seems to be perfectly incardinables in the art. 197 CP. The 
problem arises when there is not a random relationship between victim and hacker Incardination less conflicting results when, due to 
the selective and restrictive function of the subjective element of the unjust. 


Authors such as M oral P rats 35 however understand that most cyberbullying behaviors or freedom or against Computer prívacyJhey 

should be subsumed in the art. CP 197.2 (lacking the subjective element of the unjust paragraph 1). 


When the volitional element is aimed at discovering the "trade secrets” such conduct would be protected in the art. 278.1, which is the 
basic reference of these behaviors: "Whoever, to discover a secret company seizes by any means of data, written or electronic 
documents, Computer media or other objects relating thereto, or uses any of the means or instruments referred to in paragraph 1 of 
Article 197 ' 36. 


The provisión expressly refers to 'data, documents ... electronic, Computer media ... "and for forwarding to 197" emails ... 
telecommunications ... or... any other signal 


workers (Vid., by all T IEDEMANN, Klaus, Economicpower and crime (trad. Matilla Villegas, Amelia), Ariel, Barcelona, 

1985, pp. 124-25 and S ieber, Ulrich, "Documentation for an approach to Computer crime" Cybercrime, op. cit., pp. 68 et seq.). Entering data or program modifications can be 
produced directly in the Computer system that handles the author or another that is accessed without authorization. 

3.4 Thus, § 202 StGB (Espionage data): "Whoever without authorization try himself or other specially secured data against unlawful interference" (imprisonment of up to three 

years or a fine). For this purpose, data are considered "only those electronic, magnetic or stored in a manner not immediately perceptible or which are transmitted" (vid., M ÓHRENSCHLAGER, 

Manfred, "Trends in legal policy in the fight against cybercrime" Computer crime fcoord. Mir Puig, Santiago), Ed. PPU, Barcelona, 1992, pp. 60-61 and "The new Computer 

criminal law in Germany" Informátic crime a, op. cit., pp. 135-138). Similarly, art. 615-ter of the Italian penal code "abusive access to a Computer or telematic system): The 

abusively is inserted into a Computer or telematic system protected by security measures or kept in it against the express wishes or tacit who has the right to exelude him, it 

shall be punished with imprisonment of up to three years.penalty will be aggravated, among other things, whether the destruction or damage to the system or the complete 

or partial interruption of its operation or damage data, information or programs on the same content is derived from access. Beyond what is ordinary in the punishment of 

computer-related behaviors, art. Profílipenaiideii'informatica, Giuffre, Milán, 1994, pp. 28 et seq.). 


35 Vine. ORAL M P RATS, Firmin, Comments on the New Penal Code, Aranzadi, 4th Ed., Pamplona, 2005, p. 1063. Thus the author argües: "In this way, the behavior 
interception, recording or electronic reproduction illicit Computer Communications (emails), for example, violating the" password "or re-access key should be subsumed in the 
second typical sequence art. 197.1 of the Penal Code". These behaviors would also be typified whether the acquisition had taken place on the screen as if it were done on 
Computer correspondence and printed outside the system. 

36 If in addition to discover the secret, the subject it disseminates, revelare or intends to transfer to third parties shall apply art. 278.2. Where these behaviors are performed by 
those who have legal or contractual obligation to maintain confidentiality, the art must be taken into account. 279. And if the faets are effected by who was not involved in the 
discovery, but he knows the secret illicit origin of the company, the provisión will be callable art. 280. For further study of the same vine. G onzalez R US, Juan José, Course 
of crimina! law, Vol. I, cit., Pp. 796 et seq. 
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communication ", wh¡ch places him squarely within the assumptions we try to the extent that the" empowerment "of them represents ¡n 
¡tself a unauthorized system or Computer where they are accessible. 


For jurisprudence does not seem to be a decisive element relevance of data selzed, and the STS of June 11, 200437 condemns an 
official INEM seizes merely references related to the workplace and address of the company regarding a database belonging to the 
General Treasury of the Social Security. 


it does not seem possíble, because ¡t would be too forced, incardinar behavior in article 256 of the CP as does any sector of the 
doctrine, argulng that rely surreptitlously apparatus and connected as the diction of the type seems to be oriented so-called theft of 

Use Computer time or unauthorized use or overstepping it. In turn, as noted V alle M uniz / Q uintero 

OR livares 38, the draft Penal Code demanded a "surreptitious" use, typical element which was already despised in Processing paper. 


Given the legal loophole failure and no shortage of authors39 advocating an advancement of punitive barrier (creating obstacles or 
barriers crimes as happened in France) and Based n to illicit committed frequently in the so-called dark area of cyberspace are often the 

prelude to other major illicit, since the hacker rarely content to smooth the digital space of the Citizen concerned and tends to manifest 
their intromisivo power committlng other new transgressions. 


7. - CRACKING 


Also known as Computer sabotage. We must not confuse it with the password cracking or breaking or decryption key ( passwords)'Mbi\tír\ 
is similar to hacking. In the first direction, M archena 40 defined as consisting of the destruction or widespread damage output on your 

system, data, Computer programs or data transmission behavior. 


But as stand M atayM Artiníi, The main thing about this kind of behavior is that are aimed at attacking the logical elements of the 
system, ie the software in general and files or Computer files in which data, Information or documents are collected, whatever their 
specific content. As the doctrine review42, he modus operandi concrete (deletion, formatting, virus) is indifferent. 


Among the most serious behaviors, it is remarkable, behavior cyberpunkeror cyberpunking, which can be translated into Castilian as 

electronic vandalism or Computer sabotage, by which the perpetrator is dedicated to delete, delete or modify, without the consent of the 
holder, functions or data from a Computer with the intent to hinder normal operation. The forms through which this behavior is carried 
out are, from the point of view of logic operation of Computer Systems and mechanisms, varied and normally, from the point of view of 
terminology, all are unified by reference to infection by Computer virus Systems. 


Lately some peculiarity charges smurfíng consisting of where Storming is the network router or router, overburdening the Service 

through continuous massive attacks using slave Systems or attack the system with a large number of packets with false IP addresses ( ftooding), 

blocking the system and causing global denial of Service ( DdoS or Denial of Service). 

Sometimes known as viral advertising or viral marketing ( pop ups) It can be incardinable in this, when as a result of these practices at 
least as a possible fraud It is expected that it will result in a inconsentida installation involving damage to the affected Computer 
operating Systems. 


37 STS (2nd) of 11 June 2004 (Bacigalupo Zapater). 

38 Vine. V M UNIZ ALLE, José Manuel / Q UINTERO O LIVARES, Gonzalo, Comments on the New Criminal Code, op. cit., p. 1307. 

39 Vine. M ORON L ERMA, Esther, op. cit., p.75. 

40 Cfr. M archena G Omez, Manuel, "The Computer sabotage: offenses between damage and public dlsorder" CurrentLegalAranzadi, no. 40, July 2001, p. 7. 

4 1 Vine. M ATAYM ARTIN, Ricardo, Computer crime and criminal iaw, Edisofer, Madrid, 2001, p. 59. 

42 Vine. P ynol R odríguez, José Ramón, Manual of Crimina! Law. Part. Special, 4th Ed, Thomson Civitas, 2006, p. 293. 
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As we saw, the cracking It is therefore a concept Computer nonmaterial 43, because the data included in the physical media directed to 

hardware or Computer médium whose damage must be sheltered in the generic type of damage (Art. 263 to 625 crime and lack). For 
criminal prosecution of Computer sabotage has created a specific type of art. 264.2 of the Criminal Code that would shelter damage to 
data provided for in art. 4 cybercriminality Convention. Although the opinión of a certain sector of the doctrine 44 such as typing was not 
essential they appeared already protected in the generic offense of damage. 


As regards C remades G arda 45 in the exegesis of this art. 264.2 is necessary to consider the action to qualify as a crime, the usefulness 

of these data and the reflectíon of that impairment in the activity of the owner, in addition to the intrinsic valué of these own data. 


Although it should be noted that when the dimensión of the harmful event involving the destruction or impeding of telecommunication 
facilities be applied art. 560.1 of the Penal Code. As he highlighted M archena G omez 46, widespread destruction programs email 
management must be seen as an act against property of the affected. 


The legal right however is much broader than the damaged heritage because not only are the data on the network but also legal 
security in cyberspace. It is, in my víew, a pluriofensivo crime. The best known methods to produce the destruction of the logic 

elements are viruses47, Trojan horses48, sniffers49, logic bombsflfty and worms ( worms) 51 . 


8. ADMINISTRATIVE PROTECTION 


43 As noted US G onzalez R more than a loophole in previous legislation which had was a poor understanding of the requirement of "physicality" or "materiality" that the 
material object of criminal damage (for more detail, vine required. G onzalez R US, Juan José, "An approach to criminal treatmentop. cit., pp. 138-142. 

44 thus G US onzalez R, Juan José, "The cracking and other cases of Computer sabotage" Legal Studies of Public Prosecutions 
II, CEJAJ, Madrid, 2003, p. 216. 

Four.Five Cfr. C remades G arda, Javier, "Fraud in financial Services on Une ", Legal Studies II Fiscal Ministry, 

Madrid, 2003, pp. 271-272. Similarly in the assessment of damages should take into account the economic valué of the hours spent on olean up and rebuild the logical 
elements and corrupted data, the costs of external companies contracted to carry out these tasks, a quantification of the hours lost as a result of denial of Service, etc. 

46 Vine. M ARCHENA G Omez, Manuel, op. cit., 2001, p. 9. 

47 Viruses can be defined as software specifically designed to perform two functions: replicating a Computer to another system and placed on computers so that it can destroy 
or modify programs and data files, interfering with the normal operating system processes (vid. S Neyers, Alfredo, Fraud and other cyber crimes, 

Management and Production Technologies, SA, Madrid, 1990, 101-105). The high number and variety of them, their extraordinary ability to spread and can cause extensive 
damage that explains the care and concern they have caused. Real cases and the logical difference technique Trojan horse, vine pumps, worms, and., C Lough, Bryan / M 
UNGO, Paul, 

Pirates chip: computlng mafia naked, ftrad. Camps, Carme), Ediciones B, Barcelona, 1992, pp. 127 et seq. With a detailed exposition of the birth and development of the 
phenomenon; criminological data and real cases are also available C ORCOY B IDASOLO, Mirentxu, "criminal protection of Computer sabotage. Special consideration of the 
crimes of damage" Law: Journal of Spanish legal doctrine, jurisprudence and literature, No. 1,1990, pp. 1000-1016 and S ieber, Ulrich, "Computer crime: Risk and 
prevention" Cybercrime ( coord. Mir Puig, Santiago), 1992, pp. 25-27 "Documentation for an approach to Computer crime", op. cit., pp. 74-77. 


48 It is called Trojan Horse (or Trojan), faithful English translation Trojan /?o/sethough not so used) to a malicious program capable of staying on computers and allow access 
to external users through a local network or the Internet, in order to gather information or remotely control the host machine. A Trojan is not in itself a virus, even though 
theoretically can be distributed and function as such. The fundamental difference between a Trojan and a virus is its purpose. For a program to be a "Trojan horse" has only 
to access and control the host machine without being noticed, usually under a harmless appearance. Unlike a virus, which is a destructive host, the Trojan does not 
necessarily cause damage because it is not their goal. 


49 The s/wTTersTrackers are programs used to penétrate the hard drive of the computers connected to the network for certain types of information. One launched into 
cyberspace Sw/fe/xollects the e-mails by circulating and enables control and reading. (For details vine. M Orón L ERMA, Esther, op.cit., Pp. 32-33. Different but similar are 
cookies, small programs that identify each time a user enters an information server and track your preferences, more while sniffers contení attack cookies are directed to know 
the continents of information where it goes. 

fifty They are known as such certain routines or program changes which produce changes, deletions or alterations file system at a later time than that in which they are 
introduced, when it reaches a certain time or a certain operation is performed. They are similar to the Trojan horse, although the aim pursued with logic bombs is primarily 
the damage the system or data; although they can also be used to order payments, transferring funds, etc. Experience shows that are preferred by disgruntled employees 
who schedule their bang for a time when they are no longer in the company (vid procedure., C L OSA Camacho, Luis, op. Cit., Pp. 47-48 ; S Neyers, Alfredo, op cit, pp 
113-114.... 


si To leam more about the particular methodology vine. S Neyers, Alfredo, op. cit., pp. 113-114. 


eleven 



To properly understand the Computer crimes, as noted S Errano G omez52, it must be remembered that the Criminal Code provides for 

certain legal concepts ¡nnuendo operatlng as regulatory elements, which tend to be ¡ntegrated by the definitlons previously set by the 
LOPDAT 15/1999 of 13 December on protectlon of personal data and its ¡mplementing regulation (approved by Royal Decree 
1720/2007 of 21 December). These elements function as a bridge between criminal and administrativa protection. 


Said organic law that collects Title Vil violations and disclpllnary sanctions in particular art. 44.4 pursued as very serlous offenses: data 
collection in misleading or fraudulent, communication or transfer of personal data outside where they are permitted, collect and treat 
personal data to which referred to in paragraph 2 of Article 7 if not the express consent of the affected; collect and process the data 
referred to in paragraph 3 of Article 7 when not provided for by law or affected has not expressly consented, or viólate the prohlbition 
contalned in paragraph 4 of Article 7, 


Llkewise, Law 34/2002 of 11 July, Services of Information society and electronic commerce. It covers some extent this loophole 
especially in Title Vil on Offenses and penalties. In turn, the law ineludes the duty data retentlon for Internet Service providers. 


At Community level it is necessary to conslderthe art. 17 Directive 95/46 / CE safety regulator In the data Processing that leglslation 
¡mposes on States the obligation to establlsh the technlcal and organlzational measures appropriate to protect personal data from 
destructlon, accidental or unlawful , accidental loss, alteration, disclosure or unauthorized access, particularly when data transmlssion 
is being performed within the network. 


To ensure the proper functioning of the market electronically in the field of EU Directlves 1998/27 / EC of 19 May 2000/31 / EC of 8 
June, both the European Parliament and the Council are held. 


9. PHYSICAL AND INTERNET CRIMES IN SPACE CONCRETION 

The network has a very mutable, cross-border and dynamic pace that is technologically a very complex entity nature. It entalls a 
certain dark side which causes the feeling of "invisibility" of the offenses committed in its midst. As well it is holding H errera M oreno 53 , This 
latter feature is its ralson d'etre ¡n the "relativlty of space and Computer time," through which "in a playful cyber fllcker, the offender is 
vested with the absolute attributes of timelessness and ubiquity". 


This "anonymous" characterM It causes the victim's sense of helplessness, bordering with homelessness. Contemplating the countless 
hlghways of information flowlng through the network, he thlnks that criminal justice can never take the responsiblllty for the attack 
against the victim feels that faces an "invisible" being against whose attacks just have resigned, by which rarely denounce the faets 
that are given to their detriment. When delictivo- Computer attacks are dlrected against companles or corporatlons, the "dark figure" of 
crlme finds its reason for being ¡n the "negative publicity"55 


this means for companies themselves attacked. 


52 Vine. S Errano GÓMEZ, Alfonso, Criminal law. specialparí, 8 th Ed, Dyklnson, Madrid, 2003, p. 267. 

53 Vine. H ERRERA M Oreno, Myriam, "Computer fraud in the Spanish criminal law", News Criminalno. 39, Law, Madrid, 2001, pp. 925-964. 

54 M holds Orón L ERMA the anonymous Internet user could be considered as one of the "rights" of "electronic" Citizen (cfr. M Orón L ERMA, Esther, op. cit., p. 27). 

55 Vine. A Damski, Andrzej, "Crimes related to the Computer network. Threats and Opportunlties: A Criminological Perspective " Five issues in European Criminal Justice: 
Corruption, Women in the Criminal Justice System, Criminal Policy indicators, Community Crime and Computer Críme Preventer, European Institute for Crime Prevention 
and Control (HEUNI), Helsinki, 1999, pp. 236-237. 


12 



Faced with the difficulties that arise in the prosecution of offenses committed by the network, primarily those derived from territorial 
principie, suggests the application of the theory of ubiquity and can be asserted according to it both jurisdiction instead of the as the 
action rather than the result (ie without the "transit sites" are taken into account through telematics route, which would be irrelevant). In 
favor of this ubiquity says court decisions known as the Order of the TS of March 12, 1996. 


But this seemingly simple solution conceals numerous problems and difficulties. With the existing experience to date, we can say that 
the validity of procedural principies regarding the application of criminal law in space, and the classic zeal that most countries have 
before authorizing a third country to judge a Citizen itself, is greatly complicating the prosecution of the crime committed using internet 
as a médium. 


Lege ferenda, postulable seems specializes in such crimes as local courts instruction, considered in isolation, lack of experience, 
expertise and adequate logistical mechanisms to deal with the complex dynamics criminal network emanating from jurisdiction. 


Thus, the difficulties are realized for example when the criminal activity originates from abroad and the result is produced in Spain 
however; that is, those commonly known as "distance crimes”. The claim of the Spanish judicial authorities to understand our country 
committed such crimes and claim their corresponding prosecution 56 collides with the frequent application of the theory of ubiquity by third 
countries 57 , as this is the most favorable to fill the expansive zeal of its jurisdiction ss. In addition, on many occasions, the most important 
criminal behavior are made from countries with porous or flexible for certain criminal offenses, which have very limited means, or that 
have not ratified any extradition treaty legislaron. 


10. CONCLUSIONS 

Cyberspace is a very fertile breeding ground for the transformaron not only of the economy and society but also of law in the coming 
decades, has become its own right in a vital human progress legally. A cyberspace where you can not move without legal certainty 
significantly decrease the potential of this and the development and social development. 


The absence of specific classification of certain cybernetic behavior has led certain authors, supported by the principie of legality strictu 
sensu, to deny the criminal repression of numerous behaviors. It is accepted that under this ñame fraudulent or culpable actions or 
omissions are regulated with any relationship in the commission with a Computer well, and specifically committed via the Internet. 


First, as it maintained F emandezANDsteban59, the failure of traditional models of protection in the digital environment is olear, since none 

of them shares the joint characteristics of globality and complete decentralization with the consequent difficulty and sometimes 
impossibility to control data from the network. 


This problem we face has a unique entity that should not be ninguneada. With regard to software, according to the Business Software 
Alliance and the Software Publishers Association, of the 523 million software used in 1996 worldwide, 225 million, ie almost half, were 
pirates. This represented, and then a loss of 


11.2 trillion. 


56 Under the provisions of art. LOPJ 23 corresponds to the Spanish jurisdiction knowledge of the causes for crimes committed in Spanish (...) territory. He also cognizance of 
the acts described in the Spanish criminal law as crimes, even if they were committed outside the national territory, provided that the act is punishable at the place of 
execution. 

57 As is known, there are three criteria or theories: a) Activity theory, according to which the offense committed means where the subject performs externally criminal behavior. 
b) Theory result, according to the same crime is committed where the external result takes place, c) Theory ubiquity, according to her, the crime committed means where is 
performed the activity or result (Vid. C OBO OF R OSAL, Manuel / V IVES A nton, Thomas manifests S., Criminal law. parígenerates I, Tirant lo Blanch, Valencia, 1999, pp. 
209 et seq.). 

58 Combined with the effect of classical principies such as non-delivery of the national Citizen, according to which the extradition of nationals is not granted for offenses 
corresponding to meet the country's courts or the principie of territoriality; according to him, the effectiveness of our criminal law is limited, generally, the national territory. 

59 Vine. F Ernandez E steban, María Luisa, New technologies, internet and fundamental rights, Me Graw-Hill, Madrid, 1988, pp. 90 et seq. 
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This legal vacuum should not be covered, as noted M oran L ermabo, merely by the punitive law. Rightly the author considers that the 

behavior of hackers can not always be covered by criminal law because it is not admissible were typlng as an autonomous crime of 
mere activity, so ¡t would be wlse to contémplate, if any, such conduct outside the criminal system. It examined the varlous posslbilltles 
of the Spanish Penal Code at this point, it is concluded that the conduct of Computer intrusión are not always fit ¡nto dlfferent types. 


insufficlent rules and adminlstratlve mechanlsms pólice penallzing denoted and berate both perpetrators of hacklng as network 
operators and provlders providers access Services that provide links to default or neglect favor this type of illicit actlvities . 


Moreover conferrlng the above entities telematlc some responslbility, it is not possible to ¡mpose either a generic duty control so that 
the provider becomes a sort of ¡rondad guarantee of the legality of the contents put on your server by third parties ei. 


Alone should intervene Criminal Law when markedly exceed the administrativosancionadora and behaviors that conflict with legal 
certalnty that should govern cyberspace barrier. In other words the repressive legal approach should continué starred primarily by the 
Admlnlstration under the Fragmentary principies and minimum interventlon. 


Secondly prevention against this type of behavior should have a clear technlcal dimensión, not just legal. So the technology itself tends 

to react to the risks that unconsciously generates: antivirus programs, cookies cancellera, detectara web bugs, repeatere mail ( anonymus 
remailers), anonymizer navigation, servers proxy, cryptographic applications and software agents or security protocols are examples of 

this struggle for safeguardlng computar privacy. 


In analog sense M oron L erma 62 It considera that the implementation of the technical security measures instrumentalized through 

approprlate technologlcal measures, appears as the most approprlate way having a preferential basls on the criminal threat. 


However, this type of autotutela user self-protectlon or have the serious disadvantage of leaving undefended broad layers of the 
population who do not have flnancial or technlcal resources to ensure thelr own protection. 


Thirdly because cyberspace is projected across natlonal borders an International regulatlon on this matter is necessary. Computer 
manipularon performed remota data raises the questlon of what the appllcable law when mlsmatch rather than manipularon with 
where the fraudulent result occurs. 


The essentially cross-border and International nature of the informaron hlghways and the free flow of Information that flows from such 
networks do we meet with a decentrallzed, globalized and temporarlly unllmited spatial parameters. This lack of boundaries avoca us a 
necessary ¡nternatlonal cooperaron, which should be reflectad ¡n both leglslative harmonizaron (as in the case of the European Union) 
and, in tum, to foster closer judicial and International collaboration. 


Finally, it does not seem negligible, by way of lege ferenda, encourage the creation of a specialized field of cybercrime jurisdiction. The 
complicaron and enormous difficulty involved in instructlng such causes do need to download to local courts of their persecution and 
entrust it to a new curia, proficient and expert in these conflicts, to provide a degree of legal certainty and professionallsm that makes 
the infosphere the oíd dream of Tim Berners Lee "a place of universal communication chaired by the ideal of freedom and individual 
autonomy". 


60 Vine. M ORON L ERMA, Esther, "Criminal Law and new technologies: current situation and future prospects" Internet and legal pluralism: emerging forms of regulatlon, (cooró. 

by Pompeu Casanovas, Romeo), Comares, Granada, 2003, pp. 93 et seq. 
si In analog sense ORON M L ERMA, Esther, op. cit., p. 170. 

62 Cfr. M ORON L ERMA, Esther, op. cit., p. 171. 
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SUPPORTS 


1 ’ phishing ’ls a phishing pursuing appropriate confidential user data to undermine foreign assets 


2.-' pharming 'It is the exploitation of a vulnerable DNS server or user equipment to redirect one domain to another Computer 


3. One of the main features of Computer scam ¡s that structurally is not required deception 


4. The manlpulation is to alter, modify or hide Computer data to improper operation or not are carried out with 


5. The Hacking It consists of outside unauthorized access to files and databases systems 


6 . The 'Cracking' It involves destruction or damage production system, data, software or telematic 


7. The victim feels that faces an "Invisible" to be agalnst attacks whose only remalns resign themselves, so rarely complaint 


fifteen 



